static-analysis
Unexecuted code review
Static analysis is the examination of code without executing it—analyzing source files to find bugs, security vulnerabilities, or style violations before the program runs.
Compilers perform basic static analysis; specialized tools go deeper: The static analysis caught a null pointer dereference.
Contrasts with dynamic analysis, which examines running programs.
Long-distance fluid transport tube
- automatedOperating without human control
- continuousWithout pause or gap
- compile-timeWhen source becomes executable
- gatingControlling access selectively
baseline · suppression · triage · remediation · annotation · exclusion · incremental · scheduled
Source code inspection tool
- scannerDevice that reads data
- rulesetCollection of governing principles
- pluginModular software extension
- configurationArrangement of parts
Crawling creature or defect
- vulnerabilityOpenness to harm
- injectionSyringe-delivered dose
- uninitializedNot given initial value
- taintMake impure
Openwork of crossed strips
- soundnessReliability of structure
- completenessState of being whole
- approximationNear but inexact value
pipeline
Long-distance fluid transport tube
- automatedOperating without human control
- continuousWithout pause or gap
- compile-timeWhen source becomes executable
gating · baseline · suppression · triage · remediation · annotation · exclusion · incremental · scheduled · on-demand
linter
Source code inspection tool
bug
Crawling creature or defect
- vulnerabilityOpenness to harm
- injectionSyringe-delivered dose
- uninitializedNot given initial value
lattice
Openwork of crossed strips
- soundnessReliability of structure
- completenessState of being whole
- approximationNear but inexact value
maintainability
Ease of ongoing repair
- duplicationMaking an identical copy
- couplingJoint between systems
- cohesionTendency to bind together
fan-out · dependency · threshold · dashboard · report · trend · baseline · benchmark · scoring · rating